CVE-2026-41555
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.
- Score
- CVSS 3.1 9.3 Critical
- Status
- Deferred - audit@patchstack.com
- Published
- 2026-10-06
- Last modified
- 2026-10-06
- Weaknesses
- CWE-89
Affected products
- Capture Email (Weblizar Wordpress Themes Plugin)
- Newsletter Subscription Form User Subscriptions Form (Weblizar Wordpress Themes Plugin)
References
- https://patchstack.com/database/wordpress/plugin/newsletter-subscription-form/vulnerability/wordpress-newsletter-subscr…
